Summary
It was discovered that libEBML incorrectly handled certain media files. If
a user were tricked into opening a specially crafted media file, libEBML
could possibly be made to crash, resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libebml | 1.3.3-1ubuntu0.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | libebml | 1.3.5-2ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based bu…
References
-
report
https://ubuntu.com/security/CVE-2019-13615